Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
File: eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft (raw, json)
Hash identifier: vMXuA6KOHmYow/ll/s+sWlfNFGbETzgfG1bgbgnoMUA=
Subject key identifier: 4A:90:58:8E:9A:C7:1F:59:9B:EC:2E:4F:C6:3F:6A:E7:C3:F9:4A:C6
Authority key identifier: 78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
Certificate issuer: /CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Certificate serial: 019D2A0536360994DD2EFE1F0332804399C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
Manifest number: 15CA
Signing time: Thu 26 Mar 2026 12:01:17 +0000
Manifest this update: Thu 26 Mar 2026 12:01:17 +0000
Manifest next update: Fri 27 Mar 2026 12:01:17 +0000
Files and hashes: 1: 3edVNIQ8giF1qXuIKY5zvC52QPU.roa (hash: xFzOrGAmYF8WxAniQT/SClssrLBypXfT4TnwjdoYxO8=)
2: eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl (hash: +X8dLp0V3G+vreXR7GQLgPqKJo5Zg87yFK146VzPqP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:05:36:36:09:94:dd:2e:fe:1f:03:32:80:43:99:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Validity
Not Before: Mar 26 12:01:17 2026 GMT
Not After : Mar 27 12:01:17 2026 GMT
Subject: CN=4a90588e9ac71f599bec2e4fc63f6ae7c3f94ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a9:fd:04:e3:c2:c5:9e:08:f0:c7:26:a0:56:
6f:57:ac:7c:3d:e1:60:01:25:e3:10:b2:3e:0f:f7:
59:ab:d7:7d:38:73:b2:d0:87:55:b7:d2:e5:c4:cb:
e0:25:07:f1:95:7e:16:ac:ba:49:82:ee:3b:63:18:
02:3e:1e:c3:e9:c6:8d:04:b3:25:b4:62:8f:61:fb:
90:e0:4f:c8:20:06:60:b0:77:08:cb:b6:f0:67:c5:
4d:dc:fd:86:3b:c2:15:fd:24:c6:90:c9:fc:d7:8e:
e9:7d:3f:01:3b:29:0f:48:f0:a6:fb:6c:05:af:08:
0b:fa:21:b5:4d:be:80:ae:df:09:40:99:d2:38:e9:
e2:55:16:38:08:e4:29:8c:34:26:cc:af:1b:fa:4d:
6b:87:61:ef:2b:8a:07:9d:9a:5f:9c:0c:bb:02:20:
a0:59:21:89:82:0d:31:85:4b:66:65:9d:d9:2a:55:
ed:f5:f5:ae:c1:08:c5:e8:41:ba:4f:81:89:91:7a:
43:0b:45:db:d9:2c:d1:ac:d9:ef:85:d4:23:0f:9c:
d7:05:95:7c:e1:c4:d7:22:91:c9:ca:2d:0f:f9:95:
60:75:f3:37:8a:ae:f1:ee:aa:38:e9:e1:54:2b:50:
e9:01:d7:8f:91:8c:d9:6a:63:32:1b:32:be:8a:60:
25:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:90:58:8E:9A:C7:1F:59:9B:EC:2E:4F:C6:3F:6A:E7:C3:F9:4A:C6
X509v3 Authority Key Identifier:
keyid:78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:41:57:86:b2:22:92:1d:02:4d:fd:24:a0:41:b0:e9:a5:f1:
49:a6:71:2c:90:ba:a2:31:67:50:93:93:83:94:20:73:dd:35:
10:0e:a9:46:f9:b8:b8:b9:14:65:91:88:a4:57:2b:6d:2d:c7:
3d:55:77:a7:61:75:8f:dc:4f:a4:61:3e:56:ce:34:64:bc:a3:
29:5e:ff:07:6e:25:56:95:e3:89:48:4e:fa:7a:c9:31:48:6f:
f7:0a:20:54:cd:41:e5:1c:2e:ed:92:fc:e4:19:c5:c1:fa:7a:
59:2d:26:15:f2:4e:6a:f4:e5:ba:5e:04:3a:f1:d8:4e:7b:50:
e3:ac:8a:24:ee:62:70:e8:04:38:98:3f:1f:19:8a:14:62:bb:
80:ab:50:10:a0:40:df:73:a3:31:01:e6:f7:28:ff:ac:a2:bd:
c7:fe:a6:5f:88:a6:79:2b:06:9b:4a:3d:19:7c:39:e4:fc:be:
0b:1e:04:ed:b8:98:7b:2f:3e:f1:d0:5d:61:de:5b:3d:6c:44:
d1:84:44:d2:6e:5d:5d:02:09:59:16:75:09:f5:e8:96:1b:1c:
56:49:77:23:51:6a:2c:0e:24:85:97:08:a7:a7:11:6a:44:bc:
3f:6b:65:1b:c2:5b:a5:a8:f2:24:6f:82:08:f8:27:3b:62:c2:
78:d3:e9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:20:29 2026 by rpki-client